create soap-security object